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Entanglement between three or more parties exhibits a realm of properties unknown to two-party 
states. Bipartite states are easily classified using the Schmidt decomposition. The Schmidt coeffi- 
cients of a bipartite pure state encompass all the non-local properties of the state and can be "seen" 
by looking at one party's density matrix only. 

Pure states of three and more parties however lack such a simple form. They have more invariants 
under local unitary transformations than any one party can "see" on their sub-system. These "hid- 
den non-localities" will allow us to exhibit a class of multipartite states that cannot be distinguished 
from each other by any party. Generalizing a result of BPRST^ and using a recent result by Nielsen 
we will show that these states cannot be transformed into each other by local actions and classical 
communication. Furthermore we will use an orthogonal subset of such states to hint at applications 
to cryptography and illustrate an extension to quantum secret sharing (using recently suggested 
((n, fc))-threshold schemes). 



I. INTRODUCTION 

The entanglement properties of bipartite pure states 
have already been treated extensively. The analysis of 
entanglement and its properties for these states is much 
easier than for 3 or more party shared states due to a 
particularly convenient form that captures all non-local 
parameters: the (unique) Schmidt decomposition [nO|. 
An interesting question which arises in attempts to clas- 
sify entanglement is which states can be obtained from 
a given state if we allow local actions and classical com- 
munication of the parties. By classical communication 
we mean an a priori unlimited amount of two-way classi- 
cal communications. We will call these transformations 
of a fc-party state k-LOCC (fc-party local operations and 
classical communication) . The crucial difference between 
pure local unitary action and LOCC is that each party 
may perform (generalized) measurements on its subsys- 
tem and broadcast the outcomes via classical channels 
between the parties. The other parties may choose their 
subsequent actions conditional on the outcomes of these 
measurements . 

For bipartite pure states Nielsen [Q has recently found 
necessary and sufficient conditions for the process of en- 
tanglement transformation via 2-LOCC to be possible. 
A key tool in this result is the Schmidt-decomposition of 
bipartite states and the conditions involve the Schmidt- 
coefficients of the states only. 

So once we are given the density matrix of one party 
a bipartite pure state contains no more secret to us: 
The eigenvalues of one party's density matrix completely 
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characterize the state (up to equivalence under local uni- 
tary operations) and give us complete knowledge about 
its entanglement transformation properties under local 
operations and classical communication between the par- 
ties. In other words given a sufficient supply of copies of 
a certain state shared by two parties each of the parties 
is able to determine (up to a certain precision) its equiv- 
alence class under local unitaries and which other states 
it can be transformed into via 2-LOCC. 
The situation is drastically different for multipartite 
states involving more than two parties. No conve- 
nient (locally invariant) form-analogous to the Schmidt- 
decomposition-can be given. The number of invariants 
of a state under local unitaries grows exponentially with 
the number of parties (see Section ||) . Attempts to find 
canonical points on the orbits of multipartite states have 
been made Q, but yield unwieldy outcomes. We will 
say that two multiparty-states are unitarily equivalent 
(1^) ~ 1$)) if they can be transformed into each other 
by local (single-party) unitary operations only (without 
classical communication). Linden and Popescu have 
given a lower bound on the number of parameters needed 
to describe equivalence classes of multipartite states. To 
parameterize inequivalent states they also exhibited an 
explicit polynomial form for invariants of a m ultipartite 
state under local unitaries (see Section IIIB ). Some of 
these invariants are functions of the eigenvalues of the lo- 
cal density matrices of all parties. For three (and more) 
parties however the number of independent invariants un- 
der local unitaries is bigger than the number of indepen- 
dent eigenvalues of all local density matrices. This means 
that if we get all possible information from each party's 
subsystem there will be invariants under local unitaries 
that we cannot determine. We will call these parameters 
hidden non-localities of our quantum-state. 
Complete knowledge of each local system thus does not 



give us complete information on the equivalence class of 
the multipartite state under local unitary operations. 
Let's review Nielsen's result to make the difference be- 
tween bipartite and multipartite states more precise: For 
bipartite pure states and 2-LOCC there is a partial or- 
dering on the states that characterizes their mutual en- 
tanglement transformation properties H] : 
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where pA is the density matrix of one party and p\ -< 
p\ means that the eigenvalues Af , . . . , A* of p* are ma- 
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The arrow indicates that the eigenvalues have to be put 
into decreasing order. 

This gives a partial ordering in the space of all non-local 
parameters of bipartite states (remember that the non- 
local parameters are the independent eigenvalues of the 
density matrix of one party). In the case of just two 
qubits shared by two parties this even gives a total or- 
dering on the states meaning that given two states ei- 
ther the first can be transformed into the second or vice 
versa (there is only one independent Schmidt-coefficient). 
Among higher dimensional bipartite states however we 
also find sets of states that cannot be transformed into 
each other either way by LOCC. These states have been 
termed incommensurate. The smallest system to provide 
us with two bipartite incommensurate pure states is the 
9-dimensional space of two qutrits [Q . Also note that the 
commensurateness or incommensurateness of two bipar- 
tite states can be immediately identified by looking at 
the density matrix of one subsystem. 
Two bipartite pure states whose one-party density ma- 
trices have the same eigenvalues are always mutually ob- 
tainable from each other via 2-LOCC. Also 
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implies that starting with an EPR-type bipartite state 
(unique up to local unitaries with the property that its 
density matrix obtained by tracing out one party is pro- 
portional to the identity matrix) we can extract every 
given bipartite state |$) with local operations and clas- 
sical communication. The partially ordered set of states 
under 2-LOCC has just one maximal state (up to unitary 
equivalence)! 

We will show that this structure is very different for mul- 
tipartite states. BPRST^ B, B have found two 3-party 
states-each party having 2 qubits-of dimension 2^ that 
are incommensurate although all of their sub-density ma- 
trices are identical. Following their argument we will use 
Nielsen's result (nl) to generalize their proof and show 



that even for the smallest 3-partite state (of dimension 
8) there are incommensurate states that have identical 
or similar local density matrices. Their incommensu- 
rateness can not be "seen" by looking at subsystems of 
the state (it is hidden). We connect hidden non-localities 
to hidden incommensurateness to see that two multipar- 
tite states with similar density matrices on each party 
are incommensurate if and only if they are not unitarily 
equivalent. 

We give some examples of locally equivalent k-LOC'C in- 
commensurate states. We will suggest how to "encode 
into hidden non-localities" with the help of an orthogo- 
nal subset of such states. These states have the property 
that they are totally indistinguishable from each other 
for each party alone and cannot be transformed into each 
other by local operations and classical communication be- 
tween the parties. Furthermore we can find a set of such 
states that are maximal in the sense that they cannot be 
obtained from any other (unitarily not equivalent) state 
by fc-LOCC. Only if the parties perform a collective (or- 
thogonal) measurement they will be able to (perfectly) 
distinguish these states. This area needs further explo- 
ration. 

We will analyze a recently suggested cryptographic pro- 
tocol [pi for quantum secret sharing to identify a class 
of incommensurate and locally equivalent states in them. 
An {{n, k)) threshold scheme (fc < n) is a method to en- 
code and divide a secret quantum state between n parties 
such that from any k shares the state can be perfectly re- 
covered and from any fc — 1 or fewer shares no information 
whatsoever about the state can be inferred. 
The scheme as introduced in H assumes that all parties 
are honest when they participate in recinstructing the 
secret. Allowing for the possibility of some parties be- 
ing dishonest in order to retrieve the secret alone we will 
show how the scheme can be "misused" for cheating by 
one party if it is used to encode a "classical" bit and how 
this cheating can be prevented by using incommensurate 
locally identical states. 



II. COUNTING HIDDEN NON-LOCALITIES 

Linden and Popescu [^ have classified the orbits of 
multipartite states under local unitary operations and 
determined the dimension of generic orbits and the num- 
ber of parameters needed to describe the location of such 
an orbit in Hilbert space. 

In the case of k parties each having one spin 1/2 par- 
ticle (qubit) there at least 2^^+^ — 2 — 3fc real param- 
eters that characterize non-local properties. (Initially 
each 2'^-dimensional state has 2^^ complex parameters 
and the requirement of unit norm leaves 2^~^^ — 1 real 
parameters. The group of equivalence transformations is 
U{1) X 5f/(2) X SU{2) X ... X S't/(2)-each local unitary 
U{2) ~ U{1) X SU{2) but each local phase can be fac- 



tored out to one single global phase. The group (and the 
generic orbit) then has dimension 3fc + 1 or less.) 
Furthermore an explicit form for polynomial invariants 
of an orbit has been given |^ (see Section HIE). To 
get a picture of how the number of hidden non-localities 
grows let's analyze the three, four and five-party cases. 
We can easily count parameters in the three party spin 
1/2-case: We have 5 (independent) non-local parameters 
but only three (in general) different density matrices each 
characterized by one eigenvalue. So there are 2 non-local 
parameters that we cannot "see" by only looking at var- 
ious subsystems of our entangled state. Now let's look 
at the four-party spin- 1/2 case. Here we have at least 
18 non-local parameters but at most 7 independent sub- 
density matrices where two density matrices are inde- 
pendent if the eigenvalues of the first do not completely 
determine the eigenvalues of the second. The four one- 
party matrices each have one non-local parameter and 
the 3 independent density matrices of 2 joint parties have 
at most 3 parameters each thus leaving a total of at least 
18 — 4*1 — 3*3 — 5 hidden non-localities. Of the 18 
non-local parameters 14 cannot be seen by only one party 
alone, they are hidden if we look at one-party subsystems 
only. For the 5-party case the number of non-local pa- 
rameters that cannot be seen by looking at each party 
locally only is < 58. There are at least 18 non-local pa- 
rameters that cannot be accessed by looking at any one 
and two-party subdensity matrices of the system. 
In general the number of hidden nonlocalities grows ex- 
ponentially with the number of parties. 



III. A CLASS OF 3-LOCC INCOMMENSURATE 

STATES 



outcome and before Alice's next action can be viewed as 
a generalized measurement on the BC subsystem. So the 
whole 3-LOCC protocol can be viewed as a specific case 
of a 2-LOCC protocol between A and BC. In particular 
this means that if |\I') could be transformed into 1$) via 
3-LOCC it certainly could be transformed into 1$) via 
2-LOCC on A and BC. 

Assume there were a 3-LOCC protocol that transforms 
I $) to I ^) . We have chosen the states such that 
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Pa 







(4) 



Let \va) and \v^) be the two eigenvectors of p* and 
rewrite 

I*) ^ cosa\vA)\vBc) + sina\v^)\vg(^,) (5) 

This is the Schmidt decomposition of |^) as a bipartite 
A-BC state. In particular \vbc) and \vJ^q) are orthogo- 
nal in the joint BC-Hilbert space. 

Alice performs the first generalized measurement M — 
{Afi, M2, . . .} (with J2i MJA-U = /) and obtains the out- 
come i. Hereby she transforms the state |^) to a state 
I*') with 

I*') = —{cosa{M,\vA))\vBc)+sina{M,\v\))\v^c))- 

(6) 
{N is the normalization factor.) 

o LOCC 

From here Bob and Charlie will continue I ^') — > |<I>) 

,•1 1 .1 . ix/v 2-LOCConA,BC ,-,, 

so m particular we know that |W ) — > |5>). 

From 



We now want to show that there are 3-LOCC incom- 
mensurate states for the 3-spin-l/2 system. There are 5 
independent invariants under local unitaries, 3 of them 
are of the form trpl {p ^ A, B , C) and c omple tely char- 
acterize the eigenvalues of pp (see Section IIIB ). Suppose 
that we have two states |^) and |$) that differ only in 
the last two hidden invariants, i.e. the three one-party 
density- matrices of |^) and |$) have the same eigenval- 
ues. For the ease of argument choose them such that pA, 
Pb and pc have full rank 2. 

Claim: |^) and |$) are i-LOCC incommensurate. 
Proof: How does a general 3-LOCC protocol look like? 
First one party, say Alice, will perform a generalized 
measurement and broadcast her outcome. Then Bob 
and Charlie will continue with generalized measurements 
on their subsystems conditional on Alice's outcome and 
broadcast their outcomes. At a certain point Alice will 
continue and so on. Let's for a moment (mentally) merge 
Bob's and Charlie's systems and look at the 3-LOCC pro- 
tocol as a protocol between the systems A and BC. Ev- 
erything that Bob and Charlie do after receiving Alice's 



1^) 2-LOCC 1^,^ 2-LOCC |^^ 



Nielsen's criterion (fil) tells us 



Pa< Pa -< Pa 



Pa- 



(7) 



(8) 



sop* = cos^a\v){v\+sin^a\v^){v^\ has to have the same 
eigenvalues as 

Pa = ■^{cos'aNh\v){v\M} + sin^aM,\v^){v^\M}) 



N^^ N ■ 



(9) 



This implies that there is a unitary transformation U s.t. 

u'pIu^^pIA^ (10) 



It follows that U^ has to be unitary and diagonal in the 
same basis as p* ( just pick a basis where p* is diagonal 
and write out the matrix-elements in their most general 
form using that p* has full rank). We see that Mi\vA) 



and Mi\v^) have to be orthogonal and that Ahce's gener- 
ahzed measurement reduces to a local unitary operation 
on her qubit. 

Continuing this argument for each subsequent step of the 
3-LOCC protocol it follows that the whole protocol ends 
up to be a succession of local unitaries. 
But we have chosen our states to be non-equivalent un- 
der local unitaries. This completes the proof. 

Note that the constraint to full-rank local density ma- 
trices can be lifted if we only look at the restriction of 
Mi onto the support of pA, Pb, Pc- 

We have thus shown that even in the simplest 3-party 
case there are states that-having the same eigenvalues of 
all sub-density-matrices-are 3-LOCC-incommensuratc. 
Furthermore once we fix the eigenvalues of p^, pB, Pc 
we have two additional parameters to specify different 
classes of 3-LOCC-incommensurate states. In the 5- 
dimensional space of unitarily non-equivalent states we 
have found a 2-dimensional subspace of mutually incom- 
mensurate states. 

This proof generalizes trivially to more than 2 dimensions 
of each party's Hilbert space and to fc > 3 parties. To see 
the latter we note that at each step of a fc-LOCC protocol 
we can divide the system into two parts-one party that 
performs a local operation and the other fc — 1 parties- 
and apply Nielsen's criterion as in the 3-party case. 
It follows from our proof that throughout each step of 
a fc-LOCC transformation protocol each party's density 
matrices of the state obtained at a particular step have to 
majorize the corresponding density matrices of all states 
at previous steps. In particular we have the 
Corollary 1: If-say- Alice's density matrix at the be- 
ginning and at the end of a fc-LOCC protocol are similar 
then Alice's action is restricted to local unitaries. 
Corollary 2: Two fc-partite states |^) and 1$) that have 
similar density matrices (p* ~ p* p = A, B, . . .) on each 
party's subsystem are k-LOCC incommensurate if and 
only if they are not unitarily equivalent. 

After having proved the existence of 3-LOCC incom- 
mensurate states let's give some specific examples: 



A. The 2GHZ-3EPR example 

BPRSTi |], H originally showed that the following 
3-partite states are incommensurate: 



3EPR = 



2GHZ 



(|0ai05i0ci) + |Ui1bi1ci)) 

(|0a20_B20c2) + \^A2^B2^C2)) 

V2 



(11) 



(|OAiOBi) + |Uilai)) 

72 
(|0a20ci) + |U21ci)) 

72 

(|0b20c2) + |li32lc2)) 

72 



(12) 



In the 3EPR-state the three parties Alice, Bob and Char- 
lie share three EPR-pairs, one between A and B, one be- 
tween A and C and one between B and C. In the 2GIIZ 
state they share just share two GHZ-statcs. In both cases 
the density matrices of Alice, Bob and Charlie are iden- 
tical: 



'-\' 



(13) 



So in any LOCC transformation protocol from 2GIIZ 
to 3EPR and vice versa Alice, Bob and Charlie are re- 
stricted to local unitaries. It is however impossible to 
transform 2GHZ to 3EPR via local unitaries. One simple 
way to see this is to observe that 2GHZ is a tri-separable 
state-gives separable density matrices when tracing out 
any one party-whereas 3EPR is not tri-separable. (Trac- 
ing out A in 3EPR gives \l ® |EPRb2C2)(EPRs2C2| 
which is obviously not separable.) 

Note that this proof generalizes trivially to fc-partite 
states and fc-LOCC: 
(fc — 1)GHZ and („) EPR are k-LOCC incommensurate. 



B. Two locally non-distinguishable 3-LOCC 
incommensurate states of dimension 8 

Note that the smallest bipartite system that contains 
two incommensurate states has to have dimension 9 at 
least with each party possessing a qutrit. This is because 
two density matrices that are not majorized either way 
have to have rank 3 at least. But even for the smallest 
three-partite system of dimension 8 there are incommen- 
surate states. We can find states with identical local 
density matrices that cannot be transformed into each 
other via 3-LOCC. To keep calculations easier we looked 
for particularly simple states of the following form: 



I*) = a+\000) + a^\vvv) 



(14) 



and 



where \v) is a normalized state. The equivalence classes 
of these states are characterized by two parameters-say 
a+a!j_ and |(0|w)|-and have equivalent density matrices 
on all three sub-parties. So from the 5 independent in- 
variants of (generic) states under local unitary transforms 
in this case only (at most) 2 are algebraically indepen- 
dent. 

Let's look at the invariants in the general case for states 
of the form |^) — J2i j k'^v^l^i^j^k)- From the coeffi- 
cients aijk we can form polynomials that are manifestly 



invariant under local unitaries, like the degree 2 polyno- 
mial: 



|$(a,/3,7)) 



■f 1 = X! "»j'="ijfe 
ijk 



(15) 



which is the norm of the state. To fourth degree we get 
three polynomials: 



^kij O-mij ^rnpqO^kpq 



trpA 



ijkrnpq 

^3 = E ^^kjal^jOtprnqalj,^ = tr p]^ 

ijkrnpq 

/4 = ^ aijkaljmO^pqmO-lqj, = tr p^; 

ijkrnpq 



(16) 



which in general are algebraically independent. One of 
the higher degree invariants is 

-'5= / ^ OLijkO!.ii„^CtnloCtpjo'^pqmOinqk \^ ' I 

ij klmnopq 

which in general is not algebraically dependent of 
^2,^3,^4- For the simple state above ( |l4| ) we have 
I2 — I3 ^ li and a symbolical calculation (Groebner 
Basis) shows that I5 and I2 are algebraically indepen- 
dent. We now exhibit two states of the above simple 
form ( |l4[) which have similar one-party density matrices 
(and the same I2 ) but different I5 thus being 3-LOCC 
incommensurate: 



and 



'*>^Vi'««°>-if'^^^> 



m = ^\l ^\000) - ^\vvv) 



(18) 



(19) 



V2 



where \v) = /^ is the state |1) rotated by 45 degrees. 

m 



r* _ T<I> 
-'2 — -'2 



1369 



and 



If « 0.343 ^ li « 0.242 



(21) 



So these two states are 3-LOCC incommensurate. We 
can apply a local unitary transformation on each sub- 
system to one of the states to make their density- matrices 
diagonal in the same basis so that they are completely 
indistinguishable for each party. 



C. The ((3,2))-threshold states 



In a recent paper an encoding of a qutrit into a 



tripartite state has been given (see Section IVA). The 
encoded state is of the following form: 



a(|000) + 


1111) 


+ |222)) 


/3(|012) + 


|120) 


+ |201)) 


7(|021) + 


|102) 


+ |210)) 



(22) 



The density matrix of any one party is proportional to the 
identity matrix. So all of these states have the same one- 
party density matrices. Most of these states will differ 
in the hidden nonlocalities and be 3-LOCC incommen- 
surate. Here we will give a set of three locally indistin- 
guishable orthogonal states of the above form: 



|<i>i)-|<i>(l,0,0)) = (|000) + |lll) + |222)) 

|$2) - |*(0, ^=, — ) = ^(|012) + |120) + |201)) 



l*<»-71'7l'-v^> 



1 



l*.3 



+ ^(|021> + |102> + |210)) 

|$(0, i=, -i=)) ^ i=(|012) + 1120) + 1201)) 



V2 



(|021) + |102) + |210)) 



(23) 



These states differ in the value of I5 ( p7| ) which takes on 
1/9, 1/18 and for the three states respectively. They 
are thus 3-LOCC incommensurate. 



IV. CRYPTOGRAPHY-ENCODING INTO 
HIDDEN NONLOCALITIES 

We have exhibited states that cannot be transformed 
into each other by local operations and classical commu- 
nication involving three parties and shown that there is 
a large number of them. We think that these states can 
have a fruitful application in (quantum)-cryptographic 
protocols like 3-party quantum bit commitment schemes. 
We can produce states that for each subsystem are indis- 
tinguishable and yet have some hidden non-local prop- 
erty that makes them different. 

How could we encode information into the hidden non- 
localities and how can we access them? One possibility 
is to find orthogonal states that have the same respective 
sub-party density matrices and differ only in these hid- 
den parameters. Encode a bit-string into each of those 
and give a part of the corresponding state to the three 
parties, A, B and C without telling them which specific 
state they share. While the parties are locally separated 
and only allowed to perform local actions and classical 
communication they have no way to transform the states 
into each other. Only when they get together (or send 
their share of the state through a quantum channel) they 
can perform an orthogonal measurement and determine 
the encoded bitstring. To ensure that there is no common 
state fl from which two different states can be obtained 
via /c-LOCC we can choose states with local density ma- 
trices proportional to the identity. Since the identity ma- 
trix on a subsystem majorizes every other density matrix, 



p5 would have to be proportional to the identity as well. 

We have shown that in this case each party is restricted 

to local unitaries in their attempt to change the state via 

LOCC. 

Another example of 2 tri-partite states (apart from 

(E3)) that have identical one-party density matrices, are 

3-LOCC-incommensurate and orthogonal is the actual 



2GHZ-3EPR example from Section III A if we use the 
singlet state 



EPR' = -i=(|00)-|ll)) 



(24) 



instead of the EPR states. 3EPR' and 2GHZ are 3-LOCC 
incommensurate and orthogonal. 

A detailed analysis of some cryptographic schemes for the 
potential use of incommensurate states should be done. 
Here we will restrict ourselves to a rather illustrative ex- 
ample involving quantum secret sharing. 



A. How Bob can cheat using the ((3,2)) threshold 
scheme and how to prevent that 

The ((3, 2)) threshold scheme in g encodes a qutrit 



|vl/)=a|l)+/3|2)+7|3) 



(25) 



into the state |$(a,/3,7)) (p2[). Each party obtains one 
qutrit of the encoded state: Alice the first, Bob the sec- 
ond and Charlie the third. This scheme allows any two 
parties together to completely extract the secret state |^) 
(Eq) . But no party alone can infer any information about 
the secret state \^): each party's local density matrix is 
proportional to the identity. 

The procedure to retrieve |$) from say the first two 
qutrits is the following |^ : First the first register is added 
to the second (modulo 3) and then the (resulting) second 
qutrit is added to the first (mod 3). These operations can 
be performed without any measurement. This changes an 
encoded state \^{a,(3,j) to 



a(|000) + |111) + |222)) 
/3(|012) + |120) + |201)) 
7(|021)-h|102)-h|210)) 

= («|0)+/3|l)-t-7|2))®(|00) 



a(|000) + |021) + |012))+ 
^ /3(|112) + |100) + |121))+ 
7(|221) + |212) -h |200)) 



121) 



|12)) 



(26) 



The secret state is completely restored in the first reg- 
ister. Analogous decoding procedures apply for AC and 
BC. 

In the original scheme Q it is assumed that the parties 
are honest when they participate in reconstructing the 
secret quantum state. 

Now assume the president of the bank uses this proce- 
dure to encode one of three (classical) "trits" (5 = 0,1 
or 2). He may want to use three orthogonal states I'I'o), 
I'I'i), |*&2) that can be completely distinguished by an 



orthogonal measurement. So he distributes one of three 
known orthogonal states to his three vice-presidents. He 
does not want any of them alone to get knowledge about 
the encoded trit, only two of them together should be 
able to find out what the secret was. For illustration 
let's suppose that he uses the states 



|*o) = |0) 1*1 



ID 1*2 



|2) 



(27) 



to encode 6 = 0, 1 and 2 respectively and creates and 

distributes one of the three encoded states |<I>(1,0, 0)), 

|$(0, 1, 0)) resp. |$(0, 0, 1)). The three parties know the 

set of encoded states but not the actual state they are 

sharing. 

Now let's assume Bob decides to obtain the secret on his 

own without having to share his knowledge with Alice or 

Charlie. He thinks of the following strategy: 

He applies a unitary transformation U to his share of the 

encoded secret state 



U: |0) 



ID ID 



|2) |2) ^ |0) 



(28) 



The set of encoded states after this transformation will 
have changed to 



(29) 



Alice and Charlie have no way of detecting Bob's dishon- 
est action. Suppose now that at the time for two parties 
to find out what the secret was, Alice and Bob were the 
two to jointly retrieve the state. If they apply ( pq ) to the 
changed state they obtain 



$(1,0,0))- 


-^ (|010) + |121) + |202)) 


$(0,1,0))- 


-^(|022> + |100) + |211>) 


$(0,0,1))- 


-^ (|001) + |112) + |220) 



5 = 
b= 1 
5=2 



ID 



|2) ®(|10) + |01) + |22)) (30) 

|0) 



At the end of this procedure Alice and Bob arc sup- 
posed to know the value of 5. Assume 6 = 0. Alice 
will think that 6=1. Bob, however, having changed the 
state, knows that if he jointly with Alice gets the out- 
come "6 = 1", the actual trit 6 is 0! So he has obtained 
the actual secret alone and misled Alice! Bob can apply 
U~^ afterwards to erase the traces of his cheating com- 
pletely. Similar misleading happens if Bob and Charlie 
retrieve the secret. Of course if Alice and Charlie were 
the two to recover the secret trit Bob's action would not 
help and they will obtain 5 = 0. 

This type of cheating is possible, because the set of or- 
thogonal states chosen to encode 5 is equivalent under 
local unitaries. Bob has applied a local unitary trans- 
formation U to change p^is ~^ Pab ^^'^- Hereby he has 
changed the state corresponding to 6 = to a state |*) 
with p*^ = p\g. I*) and the actual state correspond- 
ing to 5 = 1 are related by a local unitary on Charlie's 



system {\^) is a purification of p\g and so is the state 
corresponding to 6 = 1). This can only be possible if the 
states encoding & = and 6=1 are unitarily equivalent. 
To prevent this type of cheating by a dishonest mislead- 
ing party, the president of the bank has to select a set 
of incommensurate orthogonal states like (E3) . They are 
not transformable into each other by any local action 
(and classical communication). The class of incommen- 
surate states has helped us to choose a quantum secret. 



V. CONCLUSION 

We have exhibited a class of locally equivalent multi- 
partite states that belong to an essential different class of 
entanglement. Actually almost all locally similar multi- 
particle states cannot be transformed into each other ei- 
ther way by local operations and classical communica- 
tion; they are incommensurate. The partial order in- 
duced on multipartite states by transformation via k- 
LOCC is different from the bipartite case: There is a mul- 
tidimensional manifold of unitarily nonequivalent states 
that are maximal in the sense that there is no other 
state from which they can be obtained by /c-LOCC. The 
number of parameters to characterize different classes 
of entanglement grows exponentially with the number 
of parties involved. This space of locally indistinguish- 
able and yet incommensurate states suggests itself for 
cryptographic applications involving several parties. We 
have shown that a set of incommensurate orthogonal and 
locally indistinguishable states can improve an {{n,k))- 
threshold scheme against a form of cheating by a party. 
Other possible applications in cryptography should be 
investigated. For instance, it is conceivable to find states 
\Q) shared between k parties such that any of them by 
choosing a local action could transform the whole state 
into either |<i>) or |^) where the last two states have the 
same local density matrices for each party. This shared 
state can then be used to share a secret between multiple 
users that none of them can reveal to an outsider. Only 
in getting together they can find out what the secret was. 
The partial order of multipartite states should be inves- 
tigated beyond classes of locally equivalent states. 
Another way to follow would be to suggest "multipar- 
tite" quantum bit commitment schemes involving sets of 
incommensurate states. Note that all proofs of the "no- 
go" theorem [p|, H for two-party quantum bit commit- 
ment schemes (like M ) use the Schmidt-decomposition of 
a bipartite state (or in other words the non-existence of 
hidden parameters for two-party entanglement!). Multi- 
party protocols do not obey their line of argument. 
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